Question

Difficulty: MediumMobile Application Support and Security Settings

Match each mobile application security control on the left with its corresponding enterprise operational deployment description on the right.

  • MAM Application WrappingInjects security code layer into custom corporate apps to enforce Data Loss Prevention (DLP) without managing the personal OS.
  • OAuth 2.0 Single Sign-On (SSO)Grants token-based app access using centralized identity providers without storing user password hashes on the handheld device.
  • Certificate-Based AuthenticationPushes unique digital credentials via profile payload to establish secure mutual TLS connectivity without manual user login.
  • Geofencing App ControlDynamically restricts sensitive mobile app functions or revokes access when the device exits designated physical coordinates.

Answer

MAM Application Wrapping matches with injecting security code layer into corporate apps for DLP enforcement; OAuth 2.0 SSO matches with token-based app authorization using centralized identity providers; Certificate-Based Authentication matches with pushing digital credentials via profile payload for mutual TLS; Geofencing App Control matches with dynamically restricting sensitive app features based on physical coordinates.
Each security mechanism directly aligns with its specific technical implementation. Application wrapping enforces application-level container security and DLP. OAuth 2.0 manages secure token exchange for authentication. Digital certificates provide passwordless device verification through PKI payload profiles. Geofencing leverages spatial coordinates to enforce location-aware security policies.

Step-by-Step Solution

1
Analyze MAM Application Wrapping
Identified as an application-level control that adds security rules directly around mobile applications.
Application wrapping is used in BYOD environments to enforce DLP without requiring full device enrollment in MDM.
2
Analyze OAuth 2.0 Single Sign-On (SSO)
Identified as an open authorization protocol delivering secure access tokens.
OAuth 2.0 facilitates seamless SSO token access across mobile apps without exposing raw password data on the local storage.
3
Analyze Certificate-Based Authentication
Identified as a public key infrastructure (PKI) authentication mechanism for devices.
Digital certificates delivered via configuration profiles provide passwordless mutual TLS verification between client devices and servers.
4
Analyze Geofencing App Control
Identified as location-aware security boundary enforcement.
Geofencing tracks GPS/cellular location parameters to toggle application capabilities automatically based on geographic location.

Key Concept

Enterprise Mobile Application Security Controls and Authentication Frameworks
Rate this question